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AMENDMENTS TO THE CLAIMS 

1 . (Currently Amended) A network device for managing a software change over a 
network, comprising: 

a transceiver arranged to send and to receive a packet over the network; 

a processor, coupled to the transceiver, that is configured to perform actions, including: 

determining an update policy associated with the network device; 

determining an availability of the software change based in part on the update 

policy; 

selecting the software change based in part on the update policy; 

receiving the software change through a distribution service according to the 

update policy; 

validating an integrity of the received software change based on examining a 
digital signature for the software change; and 

if the integrity of the software change is validated, installing the software 
change on the network device according to the update policy. 

2. (Original) The network device of Claim 1, wherein the network device is at least one 
of a network appliance, server appliance, internet appliance, intranet appliance, web server, cache 
server, file server, router, gateway, switch, bridge, firewall, and a proxy. 

3. (Original) The network device of Claim 1 , wherein the update policy further 
comprises at least one of a selection criterion, a delivery criterion, and an installation criterion. 

4. (Original) The network device of Claim 1, wherein the distribution service is further 
configured to enable access to the software change from at least one of a repository, a third-party 
service, a test server, and a development server. 

5. (Original) The network device of Claim 1, wherein the distribution service further 
comprises at least one of a reverse proxy server, and a peer-to-peer device. 
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6. (Original) The network device of Claim 1, wherein selecting the software change 
further comprises determining the selection based in part on at least one of a hardware configuration 
of the network device, a priority associated with the software change, a software configuration of 
the network device, a type associated with the software change, a control list, an impact associated 
with the software change, and a schedule. 

7. (Original) The network device of Claim 1, wherein the software change is 
independent of a software version number. 

8. (Canceled) 

9. (Original) The network device of Claim 1 , the software change further comprises a 
third-party change, wherein the third-party change is included in the software change at least in part 
by a third-party. 

10. (Original) The network device of Claim 1 , wherein installing the software change 
further comprises generating a log that enables rollback of the installed software change. 

1 1 . (Original) The network device of Claim 1 , wherein the software change further 
comprises a change package that includes at least one of a binary file, a configuration file, a change 
descriptor, a package descriptor, test procedure, and a deployment descriptor. 

12. (Original) The network device of Claim 1 , wherein the software change is digitally 
signed by at least one of a developer, releaser, tester, third-party, and a manager associated with the 
software change. 

13. (Original) The network device of Claim 1, wherein determining the availability of 
the software change further comprises subscribing to the distribution service. 

14. (Currently Amended) A method for managing a software change to a network 
device over a network, comprising: 
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determining an update policy associated with software for the network 

device; 

determining, over the network, an availability of the software change based in 
part on the update policy; 

selecting the software change based in part on the update policy; 

receiving the selected software change over a distribution service according 
to the update policy; and 

if the received software change is valid based on a digital signature, installing 
the received software change on the network device according to the update policy. 

15. (Original) The method of Claim 14, wherein determining the update policy further 
comprises determining at least one of a selection criterion, a delivery criterion, and an installation 
criterion for the software change. 

16. (Original) The method of Claim 14, wherein determining an availability of the 
software change further comprises: 

subscribing to the distribution service; and 

monitoring the distribution service for the software change. 

17. (Original) The method of Claim 14, wherein selecting the software change further 
comprises determining the selection based in part on at least one of a hardware configuration of the 
network device, a priority associated with the software change, a software configuration of the 
network device, a type associated with the software change, a control list, an impact associated with 
the software change, and a schedule. 

18. (Original) The method of Claim 14, wherein the software change further comprises 
a change package that includes at least one of a binary file, a configuration file, a change descriptor, 
a package descriptor, test procedure, and a deployment descriptor. 
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19. (Original) The method of Claim 14, wherein installing the received software change 
further comprises determining at least one of a priority, an impact, an integrity, and a time 
associated with the installation of the software change. 

20. (Original) The method of Claim 14, wherein the distribution service further 
comprises at least one of a reverse proxy server and a peer-to-peer distribution service. 

2 1 . (Currently Amended) A system for communicating a change package over a 
network, comprising: 

a repository configured to store the change package; 

a distribution service, coupled to the repository, that is configured to distribute the 
change package over the network; and 

a client, coupled to the distribution service, that is configured to perform actions, 

including: 

determining an update policy associated with the client; 

determining an availability of the change package based in part on the update 

policy; 

selecting the change package based in part on the update policy; 

receiving the selected change package through the distribution service 
according to the update policy; and 

if the received change package is validated using a digital signature, installing 
the received change package on the client according to the update policy. 

22. (Original) The system of Claim 21, wherein the distribution service further 
comprises at least one of a reverse proxy server, and a peer-to-peer network. 

23. (Original) The system of Claim 21 , wherein the repository further comprises at least 
one of trust information, subscription information, and an observer mechanism. 
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24. (Original) The system of Claim 21, further comprising a license manager coupled to 
the distribution service, and enabled to provide at least one of a public key certificate, a software 
license, a control list, and a revocation list. 

25. (Original) The system of Claim 21, wherein the change package further comprises at 
least one of a software change, a change descriptor, a package descriptor, and a deployment 
descriptor. 

26. (Original) The system of Claim 21, wherein the client further comprises at least one 
of a network appliance, a server appliance, internet appliance, intranet appliance, cache server, web 
server, file server, router, gateway, bridge, firewall, and a proxy. 

27. (Original) The system of Claim 21 , wherein the distribution service further 
comprises at least one of a reverse proxy server, and a peer-to-peer device. 



28. (Currently Amended) An apparatus for managing a software change over a network, 
comprising: 

a transceiver arranged to send and to receive a packet over the network; 

a processor, coupled to the transceiver, that is configured to perform actions, including: 

a means for determining an update policy associated with the apparatus; 

a means for employing the update policy to perform further actions, 



including: 



a means for determining an availability of the software change; 

a means for selecting the software change; 

a means for receiving the software change through a distribution 



and 



means for validating the software change based on a digital signature; 
a means for installing the validated software change on the apparatus. 



